DSA-2021-080: Dell PowerEdge VRTX Security Update for a Weak Password Encryption Vulnerability
Podsumowanie: Dell PowerEdge VRTX remediation is available for a weak password encryption vulnerability that may be exploited by malicious users to compromise the affected system.
Ten artykuł dotyczy
Ten artykuł nie dotyczy
Ten artykuł nie jest powiązany z żadnym konkretnym produktem.
Nie wszystkie wersje produktu zostały zidentyfikowane w tym artykule.
Skutki
High
Szczegóły
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2021-21507 | Dell Networking X-Series firmware versions prior to 3.0.1.8 and Dell PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account. | 8.8 | CVSS:3.1(AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) |
For information regarding the X-Series remediation, see KB article 185250: DSA-2021-017: Dell Networking Security Update for a Weak Password Encryption Vulnerability
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2021-21507 | Dell Networking X-Series firmware versions prior to 3.0.1.8 and Dell PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account. | 8.8 | CVSS:3.1(AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) |
For information regarding the X-Series remediation, see KB article 185250: DSA-2021-017: Dell Networking Security Update for a Weak Password Encryption Vulnerability
Produkty, których dotyczy problem, i środki zaradcze
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell PowerEdge VRTX | VRTX 1GbE Switch Module (R1-2401) firmware versions prior to 2.0.0.82 | 2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=4H24H |
| Dell PowerEdge VRTX | VRTX Switch (R1-2210) firmware versions prior to 2.0.0.82 |
2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=94P89 |
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell PowerEdge VRTX | VRTX 1GbE Switch Module (R1-2401) firmware versions prior to 2.0.0.82 | 2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=4H24H |
| Dell PowerEdge VRTX | VRTX Switch (R1-2210) firmware versions prior to 2.0.0.82 |
2.0.0.82 | https://www.dell.com/support/home/en-us/drivers/DriversDetails?driverId=94P89 |
Historia zmian
| Revision | Date | Description |
| 1.0 | 2021-04-14 | Initial Release |
| 1.1 | 2021-06-10 | Acknowledgments Updated |
Podziękowania
Dell Technologies would like to thank Ken Pyle for his contributions.
Powiązane informacje
Zastrzeżenie prawne
Produkty, których dotyczy problem
POWEREDGE VRTX, Product Security InformationWłaściwości artykułu
Numer artykułu: 000185252
Typ artykułu: Dell Security Advisory
Ostatnia modyfikacja: 22 lis 2021
Znajdź odpowiedzi na swoje pytania u innych użytkowników produktów Dell
Usługi pomocy technicznej
Sprawdź, czy Twoje urządzenie jest objęte usługą pomocy technicznej.